DevSecOps Business Analyst — Secure SDLC & Automation

ALOIS UK; Sydney; On-site; AUD 90,000 - 140,000; Full time

Job summary

ALOIS Australia is seeking a DevSecOps Business Analyst to gather and translate security and compliance requirements for DevSecOps initiatives in Sydney. You will work with cross-functional teams to define security controls and tooling.

This contract/FTC role focuses on secure software development practices, CI/CD security, and governance reporting, with opportunities to advance DevSecOps maturity.

Qualifications

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps initiatives.
• Translate requirements into user stories, processes, functional specs, and acceptance criteria.
• Facilitate workshops to identify security risks, control gaps, and automation opportunities across the SDLC.
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning, secrets management, container security, and compliance monitoring solutions.
• Track and report security findings, remediation status, risk exceptions, and compliance metrics while ensuring governance alignment.

Responsibilities

• Gather, analyze, and document business, security, and compliance requirements for DevSecOps.
• Collaborate with development, security, QA, and operations to define CI/CD security controls.
• Translate requirements into user stories, processes, and acceptance criteria.
• Facilitate workshops to identify security risks and automation opportunities across the SDLC.
• Support onboarding of applications into DevSecOps toolchains, including secure code scanning and secrets management.
• Track security findings and compliance metrics while aligning with governance.
• Prepare SOPs and dashboards to drive DevSecOps maturity.

Skills

DevSecOps

Business Analysis

Security Requirements

SDLC Security

Tools

SAST

SCA

Secrets Management

Container Security

Job description

ALOIS Australia is seeking a DevSecOps Business Analyst to gather and translate security and compliance requirements for DevSecOps initiatives in Sydney. You will work with cross-functional teams to define security controls and tooling.

This contract/FTC role focuses on secure software development practices, CI/CD security, and governance reporting, with opportunities to advance DevSecOps maturity.